A team is writing security test cases for a new authentication component that validates user credentials. Which test case is most directly aligned with a component-level security objective?

Confirm that the login page loads quickly under normal network conditions.

Ensure that the component can be deployed to multiple cloud regions for high availability.

Check that the component's error messages are displayed in the user's preferred language.

Verify that the component rejects passwords longer than the defined maximum length.

What is the purpose of using a stub in component-level security testing?

To increase the speed of the component under test

To generate random security test data

To record the results of the security tests

To simulate the behavior of a component that is not yet available or is external to the test environment

A team is setting up a test environment for a component that communicates with a legacy mainframe system. The mainframe is not available in the test lab. Which test environment component is essential to execute security tests on the component in isolation?

A full production replica of the mainframe environment.

A load balancer to distribute traffic among multiple component instances.

A stub that simulates the mainframe's responses to the component's requests.

A network sniffer to capture traffic between the component and the mainframe.

What is the purpose of a security test case that verifies a component's error handling?

To ensure the component crashes gracefully

To verify that the component logs all errors for debugging

To test the component's performance when errors occur

To ensure that error messages do not reveal sensitive information

Certified Tester Security Test Engineer

Domain 3Objective 3

Security Test Design at Component Test Level CT-STE Practice Questions (Page 1)

Part of the The Security Test Process domain, which makes up ~12% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~4–6 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

8concepts

8 Concepts in This Objective

Security Test Design at Component Level
Component-Level Security Test Objectives
Threat and Risk Analysis for Components
Security Test Design Techniques for Components
Security Test Cases for Components
Component Security Test Environment and Tools
Coverage and Traceability in Component Security Testing
Documentation and Reporting of Component Security Tests

Questions 1–5

1application · medium
A team is writing security test cases for a new authentication component that validates user credentials. Which test case is most directly aligned with a component-level security objective?
Select an answer first
2foundation · easy
What is the purpose of using a stub in component-level security testing?
Select an answer first
3application · medium
A team is setting up a test environment for a component that communicates with a legacy mainframe system. The mainframe is not available in the test lab. Which test environment component is essential to execute security tests on the component in isolation?
Select an answer first
4foundation · easy
Which security test design technique involves sending unexpected or random data to a component to uncover vulnerabilities?
Select an answer first
5foundation · easy
What is the purpose of a security test case that verifies a component's error handling?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.